Working today#
- The whole cycle with real zero-knowledge proofs: shield, lock, private transfer, send out, epoch close, stake and volume claims, unlock.
- The app with passkey and Phantom, the indexer, the relayer, the keeper.
- Exits to native Zcash through the bridge (1Click, NEAR Intents), with a live quote before you confirm. On a test network the exit stays closed, because test ZEC cannot cross the bridge.
Verified#
| Check | Result (19/09/2026, third pass) |
|---|---|
| Rust tests of the program | 13 + 90 passing |
| Circuit tests (constraints, proofs, keys) | 32/32 |
| End to end, real proofs, local validator | 53/53, including the attack tests |
| Keeper catch-up after 11 missed epochs | 5/5 |
| Front, full path against the live local stack | 28/28 |
Details: Security overview.
Still open#
| What is still open | Who |
|---|---|
| A ceremony round with participants outside the project (the first round was the team's own) | Team and outside participants |
| Outside audit of the program and the circuits | An audit firm |
| The admin of the pool: one key today, a multisig later | Team |
Guard
A script, tools/mainnet-check.sh, refuses a mainnet build unless the verifying keys come from the ceremony, its record is published, the program id and the admin are our own, and the two domains are set. The network service refuses to start on mainnet until it passes.